GO
Product
GoAhead
On CISA KEVExploited in the wild
17
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 9Medium 1Low 0
Watch
Add GoAhead to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41615 | 9.8 | Aug 8 | websda.c in GoAhead WebServer 2.1.8 has insufficient nonce entropy because the nonce calculation relies on the hardcoded onceuponatimeinparadise value, which does not follow the… Affected: 2.1.8 |
| CVE-2021-43298 | 9.8 | Jan 25 | The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limiting Affected: before 5.1.4 |
| CVE-2021-42342 | 9.8 | Oct 14 | An issue was discovered in GoAhead 4.x and 5.x before 5.1.5 Affected: 4.0.0 through 4.1.3; 5.0.0 before 5.1.5 |
| CVE-2019-5096 | 9.8 | Dec 3 | An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1… Affected: 3.6.5; 4.1.1; 5.0.1 |
| CVE-2017-1000471 | 9.8 | Jan 3 | EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service Affected: 4.0.0 |
| CVE-2017-5674 | 9.8 | Mar 13 | A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP ("GET… Affected: All versions, or not specified |
Showing 6